Archive
9 January 2007
Vulnerabilities first published on this day (UTC), newest first.
82 results · Feed
-
Unscored —CVE-2007-0129 Public exploit
SQL injection vulnerability in main.asp in LocazoList 2.01a beta5 and earlier allows remote attackers to execute arbitr…
-
Unscored —
Cross-site scripting (XSS) vulnerability in SimpleBoxes/SerendipityNZ Serene Bach 2.05R and earlier, and 2.08D and earl…
-
Unscored —
JAMWiki before 0.5.0 does not properly check permissions during moves of "read-only or admin-only topics," which allows…
-
Unscored —CVE-2007-0138 Public exploit
formbankcgi.exe in Fersch Formbankserver 1.9, when the PATH_INFO begins with (1) AbfrageForm or (2) EingabeForm, allows…
-
Unscored —
Multiple eval injection vulnerabilities in iGeneric iG Shop 1.0 allow remote attackers to execute arbitrary code via th…
-
Unscored —CVE-2007-0135 Public exploit
PHP remote file inclusion vulnerability in inc/init.inc.php in Aratix 0.2.2 beta 11 and earlier, when register_globals …
-
Unscored —CVE-2007-0132 Public exploit
SQL injection vulnerability in compare_product.php in iGeneric iG Shop 1.4 allows remote attackers to execute arbitrary…
-
Unscored —CVE-2007-0128 Public exploit
SQL injection vulnerability in info_book.asp in Digirez 3.4 and earlier allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2007-0133 Public exploit
Multiple SQL injection vulnerabilities in display_review.php in iGeneric iG Shop 1.4 and earlier allow remote attackers…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Drupal before 4.6.11, and 4.7 before 4.7.5, allow remote attacke…
-
Unscored —CVE-2007-0130 Public exploit
SQL injection vulnerability in user.php in iGeneric iG Calendar 1.0 allows remote attackers to execute arbitrary SQL co…
-
Unscored —
Unspecified vulnerability in the DECnet-Plus 7.3-2 feature in DECnet/OSI 7.3-2 for OpenVMS ALPHA, and the DECnet-Plus 7…
-
Unscored —
Digger Solutions Intranet Open Source (IOS) stores sensitive information under the web root with insufficient access co…
-
Unscored —CVE-2007-0117 Public exploit
DiskManagementTool in the DiskManagement.framework 92.29 on Mac OS X 10.4.8 does not properly validate Bill of Material…
-
Unscored —
Unspecified vulnerability in Drupal before 4.6.11, and 4.7 before 4.7.5, when MySQL is used, allows remote authenticate…
-
Unscored —
Kaspersky Labs Antivirus Engine 6.0 for Windows and 5.5-10 for Linux before 20070102 enter an infinite loop upon encoun…
-
Unscored —CVE-2007-0121 Public exploit
Cross-site scripting (XSS) vulnerability in search.asp in RI Blog 1.3 allows remote attackers to inject arbitrary web s…
-
Unscored —CVE-2007-0120 Public exploit
Acunetix Web Vulnerability Scanner (WVS) 4.0 Build 20060717 and earlier allows remote attackers to cause a denial of se…
-
Unscored —
Heap-based buffer overflow in Opera 9.02 allows remote attackers to execute arbitrary code via a JPEG file with an inva…
-
Unscored —CVE-2007-0122 Public exploit
Multiple SQL injection vulnerabilities in Coppermine Photo Gallery 1.4.10 and earlier allow remote authenticated admini…
-
Unscored —
Static code injection vulnerability in Coppermine Photo Gallery 1.4.10 and earlier allows remote authenticated administ…
-
Unscored —
The Javascript SVG support in Opera before 9.10 does not properly validate object types in a createSVGTransformFromMatr…
-
Unscored —CVE-2007-0119 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in EditTag 1.2 allow remote attackers to inject arbitrary web scrip…
-
Unscored —
Unrestricted file upload vulnerability in Uber Uploader 4.2 allows remote attackers to upload and execute arbitrary PHP…
-
Unscored —CVE-2007-0118 Public exploit
Multiple absolute path traversal vulnerabilities in EditTag 1.2 allow remote attackers to read arbitrary files via an a…
-
Unscored —
Linux kernel before 2.6.18, when running on x86_64 systems, does not properly save or restore EFLAGS during a context s…
-
Unscored —
Heap-based buffer overflow in the Mail Management Server (MAILMA.exe) in Eudora WorldMail 3.1.x allows remote attackers…
-
Unscored —
fetchmail 6.3.5 and 6.3.6 before 6.3.6-rc4, when refusing a message delivered via the mda option, allows remote attacke…
-
Unscored —
fetchmail before 6.3.6-rc4 does not properly enforce TLS and may transmit cleartext passwords over unsecured links if c…
-
Unscored —
Sun Java System Content Delivery Server 5.0 and 5.0 PU1 allows remote attackers to obtain sensitive information regardi…
-
Unscored —
The Adobe PDF specification 1.3, as implemented by Adobe Acrobat before 8.0.0, allows remote attackers to have an unkno…
-
Unscored —
The Adobe PDF specification 1.3, as implemented by Apple Mac OS X Preview, allows remote attackers to have an unknown i…
-
Unscored —CVE-2007-0110 Public exploit
Cross-site scripting (XSS) vulnerability in nidp/idff/sso in Novell Access Manager Identity Server before 3.0.0-1013 al…
-
Unscored —
Buffer overflow in Resco Photo Viewer for PocketPC 4.11 and 6.01, as used in mobile devices running Windows Mobile 5.0,…
-
Unscored —
WordPress before 2.0.6, when mbstring is enabled for PHP, decodes alternate character sets after escaping the SQL query…
-
Unscored —
The Adobe PDF specification 1.3, as implemented by (a) xpdf 3.0.1 patch 2, (b) kpdf in KDE before 3.5.5, (c) poppler be…
-
Unscored —
nwgina.dll in Novell Client 4.91 SP3 for Windows 2000/XP/2003 does not delete user profiles during a Terminal Service o…
-
Unscored —CVE-2007-0112 Public exploit
SQL injection vulnerability in cats.asp in createauction allows remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2007-0113 Public exploit
Buffer overflow in Packeteer PacketShaper PacketWise 8.x allows remote authenticated users to cause a denial of service…
-
Unscored —CVE-2007-0105 EPSS 11%
Stack-based buffer overflow in the CSAdmin service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 a…